Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/55j8tLGLeXbh-kRlFaOcWPFSc1Q.roa
File: 55j8tLGLeXbh-kRlFaOcWPFSc1Q.roa (raw, json)
Hash identifier: 5M8RDaRmDeaDbU+KKlHmEb74B9QmOZw39zRRSHG+UJE=
Subject key identifier: E7:98:FC:B4:B1:8B:79:76:E1:FA:44:65:15:A3:9C:58:F1:52:73:54
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE66AF30C74DCBB1333B4E873AC17
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/55j8tLGLeXbh-kRlFaOcWPFSc1Q.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211176
IP address blocks: 2a0e:aa07:e020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e6:6a:f3:0c:74:dc:bb:13:33:b4:e8:73:ac:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e798fcb4b18b7976e1fa446515a39c58f1527354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:93:08:3e:62:f2:b4:cf:b1:7b:47:ff:1b:
04:54:98:fa:17:a8:63:82:79:4a:d0:e5:c3:5b:54:
ed:af:4d:c8:76:6a:6b:71:74:45:cd:f0:b0:4a:66:
1e:ea:29:a7:7e:af:b7:06:cf:df:ad:83:79:2e:33:
08:da:80:90:89:ef:f2:b4:2b:8b:17:3b:93:e3:8d:
15:90:75:5f:eb:dc:0b:7c:f3:e3:cd:30:9b:5f:50:
4b:ce:31:65:77:d4:9f:d7:46:bb:b2:e2:a9:7a:b6:
02:8c:ab:59:90:7b:5d:d5:a6:2b:c6:77:8e:16:ae:
73:ce:db:94:f5:1d:6b:15:ce:7e:f1:70:6d:e7:16:
9f:f9:33:b8:eb:f6:3c:33:43:77:4c:ce:38:72:0f:
73:1e:0f:ac:ce:ff:78:4c:a6:66:4e:d0:29:90:80:
c3:cc:f7:00:9f:08:b0:3d:4c:f7:f3:09:2a:e8:95:
00:36:9d:39:29:05:00:12:07:02:a7:04:41:b9:97:
95:b9:38:c7:1b:81:5c:23:1d:8a:c8:e8:10:a8:eb:
5f:3f:d2:5a:05:bd:01:bc:3c:27:58:ca:5c:d9:fe:
fd:0c:ce:85:eb:ba:f0:be:86:ee:37:13:aa:63:a1:
43:51:5a:5a:80:e0:9c:f1:f6:8e:93:9f:27:37:54:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:FC:B4:B1:8B:79:76:E1:FA:44:65:15:A3:9C:58:F1:52:73:54
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/55j8tLGLeXbh-kRlFaOcWPFSc1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e020::/48
Signature Algorithm: sha256WithRSAEncryption
9f:84:3a:ee:a3:f4:37:13:86:eb:08:9c:a0:43:cc:88:2f:9a:
28:54:93:42:7f:49:ed:f2:fb:5f:ef:fb:48:38:9b:a2:97:1c:
4d:0c:f4:37:7a:7d:5c:4f:12:a7:35:32:6f:bd:51:86:2b:05:
3a:92:3f:6e:55:fb:e8:11:62:57:8f:5e:af:b4:1a:90:7f:77:
87:13:cf:91:9c:c2:3c:a6:14:e2:d9:bc:ea:01:9b:0d:a5:80:
70:8d:8e:0e:d3:5f:bb:1a:f5:2c:3f:e4:cc:e9:c4:90:34:a6:
64:3d:e0:7d:e0:74:c4:aa:ad:e7:12:81:44:79:50:34:e2:0e:
71:06:8e:a9:a5:92:c9:3e:5f:c7:ed:b0:2c:67:60:b9:76:ac:
32:34:60:5d:bc:ba:02:6e:33:f2:54:34:bb:38:37:a5:61:cd:
e3:8a:fe:a9:a3:b6:8a:44:23:79:8c:f9:14:87:a6:f8:91:eb:
a3:8b:47:86:9f:7a:96:a5:8c:32:3e:18:8f:19:16:59:76:30:
1b:2b:c1:53:f7:82:bd:bd:9e:fd:64:a8:3a:8c:e9:b6:b4:d5:
91:78:77:02:56:46:d2:77:44:dd:53:41:2d:10:31:b5:1c:75:
63:69:06:ad:b7:e8:48:78:dd:1f:49:22:43:46:67:6f:1d:7a:
8c:85:cd:09
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljuZq8wx03LsTM7Toc6wXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzk4ZmNiNGIxOGI3OTc2ZTFmYTQ0NjUxNWEzOWM1OGYxNTI3MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bKTCD5i8rTPsXtH/xsEVJj6F6hj
gnlK0OXDW1Ttr03IdmprcXRFzfCwSmYe6imnfq+3Bs/frYN5LjMI2oCQie/ytCuL
FzuT440VkHVf69wLfPPjzTCbX1BLzjFld9Sf10a7suKperYCjKtZkHtd1aYrxneO
Fq5zztuU9R1rFc5+8XBt5xaf+TO46/Y8M0N3TM44cg9zHg+szv94TKZmTtApkIDD
zPcAnwiwPUz38wkq6JUANp05KQUAEgcCpwRBuZeVuTjHG4FcIx2KyOgQqOtfP9Ja
Bb0BvDwnWMpc2f79DM6F67rwvobuNxOqY6FDUVpagOCc8faOk58nN1QCwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOeY/LSxi3l24fpEZRWjnFjxUnNUMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvNTVqOHRMR0xlWGJoLWtSbEZhT2NXUEZTYzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ag
MA0GCSqGSIb3DQEBCwUAA4IBAQCfhDruo/Q3E4brCJygQ8yIL5ooVJNCf0nt8vtf
7/tIOJuilxxNDPQ3en1cTxKnNTJvvVGGKwU6kj9uVfvoEWJXj16vtBqQf3eHE8+R
nMI8phTi2bzqAZsNpYBwjY4O01+7GvUsP+TM6cSQNKZkPeB94HTEqq3nEoFEeVA0
4g5xBo6ppZLJPl/H7bAsZ2C5dqwyNGBdvLoCbjPyVDS7ODelYc3jiv6po7aKRCN5
jPkUh6b4keuji0eGn3qWpYwyPhiPGRZZdjAbK8FT94K9vZ79ZKg6jOm2tNWReHcC
VkbSd0TdU0EtEDG1HHVjaQatt+hIeN0fSSJDRmdvHXqMhc0J
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:27:12 2025 by rpki-client